LiveChat 💬

💬 LiveChat

Real-time groupchat — join the conversation

\n \n \n

\n \n

view source

\n\n \n\n \n \n\n \n\n\n",[],[70,115],"78c0d068-2ef8-11f1-9449-42dde27851f2","app.js","22d03c98-2ef8-11f1-8174-42dde27851f2",11,["D",1775178013768],"// ─── State ────────────────────────────────────────────────────────────────────\nlet currentUser = null;\nlet lastMessageId = 0;\nlet pollInterval = null;\nlet currentTab = \"login\";\nlet cachedToken = null;\n\n// ─── Helpers ──────────────────────────────────────────────────────────────────\nfunction formatTime(isoStr) {\n const d = new Date(isoStr.endsWith(\"Z\") ? isoStr : isoStr + \"Z\");\n return d.toLocaleTimeString([], { hour: \"2-digit\", minute: \"2-digit\" });\n}\n\nfunction escapeHtml(str) {\n return String(str)\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\n// ─── Tab switching ────────────────────────────────────────────────────────────\nwindow.showTab = function (tab) {\n currentTab = tab;\n document.getElementById(\"tab-login\").classList.toggle(\"active\", tab === \"login\");\n document.getElementById(\"tab-register\").classList.toggle(\"active\", tab === \"register\");\n document.getElementById(\"auth-submit\").textContent =\n tab === \"login\" ? \"Login\" : \"Create Account\";\n document.getElementById(\"auth-error\").style.display = \"none\";\n};\n\n// ─── Auth ─────────────────────────────────────────────────────────────────────\nwindow.submitAuth = async function (e) {\n e.preventDefault();\n const username = document.getElementById(\"auth-username\").value.trim();\n const password = document.getElementById(\"auth-password\").value;\n const errorEl = document.getElementById(\"auth-error\");\n errorEl.style.display = \"none\";\n\n const endpoint = currentTab === \"login\" ? \"/api/login\" : \"/api/register\";\n try {\n const res = await fetch(endpoint, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ username, password }),\n });\n const data = await res.json();\n if (!res.ok) {\n errorEl.textContent = data.error || \"Something went wrong\";\n errorEl.style.display = \"block\";\n return;\n }\n currentUser = data.user;\n showChat();\n } catch {\n errorEl.textContent = \"Network error. Try again.\";\n errorEl.style.display = \"block\";\n }\n};\n\nwindow.logout = async function () {\n await fetch(\"/api/logout\", { method: \"POST\" });\n currentUser = null;\n cachedToken = null;\n lastMessageId = 0;\n clearInterval(pollInterval);\n pollInterval = null;\n document.getElementById(\"chat-screen\").style.display = \"none\";\n document.getElementById(\"auth-screen\").style.display = \"flex\";\n document.getElementById(\"messages\").innerHTML = \"\";\n};\n\n// ─── Chat ─────────────────────────────────────────────────────────────────────\nfunction showChat() {\n document.getElementById(\"auth-screen\").style.display = \"none\";\n document.getElementById(\"chat-screen\").style.display = \"flex\";\n document.getElementById(\"header-user\").textContent = \"👤 \" + currentUser.username;\n loadMessages();\n pollInterval = setInterval(pollMessages, 1500);\n document.getElementById(\"msg-input\").focus();\n}\n\nfunction renderMessage(msg) {\n const isOwn = currentUser && msg.username === currentUser.username;\n const initial = msg.username[0].toUpperCase();\n const div = document.createElement(\"div\");\n div.className = \"msg\" + (isOwn ? \" own\" : \"\");\n div.dataset.id = msg.id;\n div.innerHTML = `\n

${initial}

\n ${isOwn ? \"You\" : escapeHtml(msg.username)}\n ${formatTime(msg.created_at)}\n

${escapeHtml(msg.content)}

`;\n return div;\n}\n\nasync function loadMessages() {\n const res = await fetch(\"/api/messages?limit=20\");\n const data = await res.json();\n const container = document.getElementById(\"messages\");\n container.innerHTML = \"\";\n if (!data.messages.length) {\n container.innerHTML = '

No messages yet. Say hello! 👋

';\n } else {\n data.messages.forEach((m) => container.appendChild(renderMessage(m)));\n lastMessageId = data.messages[data.messages.length - 1].id;\n }\n container.scrollTop = container.scrollHeight;\n}\n\nasync function pollMessages() {\n if (!currentUser) return;\n try {\n const res = await fetch(`/api/messages/poll?since=${lastMessageId}`);\n if (!res.ok) return;\n const data = await res.json();\n if (data.messages?.length) {\n const container = document.getElementById(\"messages\");\n const wasAtBottom =\n container.scrollHeight - container.scrollTop - container.clientHeight < 80;\n const placeholder = container.querySelector(\".system-msg\");\n if (placeholder) placeholder.remove();\n data.messages.forEach((m) => container.appendChild(renderMessage(m)));\n lastMessageId = data.messages[data.messages.length - 1].id;\n if (wasAtBottom) container.scrollTop = container.scrollHeight;\n }\n } catch { /* ignore polling errors */ }\n}\n\nwindow.sendMessage = async function (e) {\n e.preventDefault();\n const input = document.getElementById(\"msg-input\");\n const content = input.value.trim();\n if (!content) return;\n input.value = \"\";\n try {\n await fetch(\"/api/messages\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content }),\n });\n await pollMessages();\n } catch {\n input.value = content;\n }\n};\n\n// ─── API Token modal ──────────────────────────────────────────────────────────\nconst BASE_URL = window.location.origin;\n\nwindow.showTokenModal = async function () {\n const modal = document.getElementById(\"token-modal\");\n modal.style.display = \"flex\";\n const display = document.getElementById(\"token-display\");\n\n if (cachedToken) {\n display.textContent = cachedToken;\n updateBookmarklet(cachedToken);\n return;\n }\n\n display.textContent = \"Generating…\";\n try {\n const res = await fetch(\"/api/token\", { method: \"POST\" });\n const data = await res.json();\n cachedToken = data.token;\n display.textContent = cachedToken;\n updateBookmarklet(cachedToken);\n } catch {\n display.textContent = \"Error generating token. Try again.\";\n }\n};\n\nfunction updateBookmarklet(token) {\n const code = document.getElementById(\"bookmarklet-code\");\n const snippet = `// Paste in browser console or use as bookmarklet:\nfetch(\"${BASE_URL}/api/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": \"Bearer ${token}\"\n },\n body: JSON.stringify({ content: \"Hello from my bookmarklet!\" })\n}).then(r => r.json()).then(console.log);`;\n code.textContent = snippet;\n}\n\nwindow.copyToken = function () {\n if (!cachedToken) return;\n navigator.clipboard.writeText(cachedToken).then(() => {\n const btn = document.querySelector(\".copy-btn\");\n btn.textContent = \"Copied ✓\";\n setTimeout(() => (btn.textContent = \"Copy\"), 2000);\n });\n};\n\nwindow.closeTokenModal = function (e) {\n if (!e || e.target.id === \"token-modal\") {\n document.getElementById(\"token-modal\").style.display = \"none\";\n }\n};\n\n// ─── Init — check if already logged in ────────────────────────────────────────\n(async () => {\n try {\n const res = await fetch(\"/api/me\");\n if (res.ok) {\n const data = await res.json();\n currentUser = data.user;\n showChat();\n }\n } catch { /* not logged in */ }\n})();\n",[],[70,123],["D",1775177799201],[133,134],[77],{"_37":144,"_13":145,"_40":146,"_42":78,"_43":44,"_45":147,"_47":48,"_49":148,"_17":79,"_52":140,"_54":149,"_56":57,"_58":-5,"_94":150,"_18":151},{"_37":135,"_13":136,"_40":137,"_42":78,"_43":44,"_45":138,"_47":48,"_49":139,"_17":51,"_52":140,"_54":141,"_56":57,"_58":-5,"_94":142,"_18":143},"1b66a71e-2efb-11f1-b457-42dde27851f2","queries.ts","009ca616-2ef8-11f1-8561-42dde27851f2",17,["D",1775179145640],"script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { createHmac, randomBytes } from \"node:crypto\";\n\nconst SECRET_KEY = Deno.env.get(\"CHAT_SECRET_KEY\") || \"default-secret-key-change-me\";\n\n// ─── Password Hashing ─────────────────────────────────────────────────────────\nexport function hashPassword(password: string): string {\n return createHmac(\"sha256\", SECRET_KEY).update(password).digest(\"hex\");\n}\nexport function verifyPassword(password: string, hash: string): boolean {\n return hashPassword(password) === hash;\n}\n\n// ─── Users ────────────────────────────────────────────────────────────────────\nexport async function createUser(\n username: string,\n password: string,\n): Promise<{ id: number; username: string; avatar_color: string } | null> {\n const colors = [\"#6366f1\", \"#ec4899\", \"#f59e0b\", \"#10b981\", \"#3b82f6\", \"#ef4444\", \"#8b5cf6\", \"#14b8a6\"];\n const color = colors[Math.floor(Math.random() * colors.length)];\n const hash = hashPassword(password);\n try {\n const result = await sqlite.execute({\n sql: `INSERT INTO users (username, password_hash, avatar_color) VALUES (?, ?, ?)`,\n args: [username, hash, color],\n });\n return { id: Number(result.lastInsertRowid), username, avatar_color: color };\n } catch {\n return null;\n }\n}\n\nexport async function getUserByCredentials(username: string, password: string) {\n const result = await sqlite.execute({\n sql: `SELECT id, username, avatar_color, password_hash FROM users WHERE username = ?`,\n args: [username],\n });\n if (!result.rows.length) return null;\n const user = result.rows[0] as { id: number; username: string; avatar_color: string; password_hash: string };\n if (!verifyPassword(password, user.password_hash)) return null;\n return { id: user.id, username: user.username, avatar_color: user.avatar_color };\n}\n\n// ─── Sessions ─────────────────────────────────────────────────────────────────\nexport async function createSession(userId: number): Promise {\n const sessionId = randomBytes(32).toString(\"hex\");\n const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString();\n await sqlite.execute({\n sql: `INSERT INTO sessions (id, user_id, expires_at) VALUES (?, ?, ?)`,\n args: [sessionId, userId, expiresAt],\n });\n return sessionId;\n}\n\nexport async function getSessionUser(sessionId: string) {\n const result = await sqlite.execute({\n sql: `SELECT u.id, u.username, u.avatar_color FROM sessions s\n JOIN users u ON u.id = s.user_id\n WHERE s.id = ? AND s.expires_at > datetime('now')`,\n args: [sessionId],\n });\n if (!result.rows.length) return null;\n return result.rows[0] as { id: number; username: string; avatar_color: string };\n}\n\nexport async function deleteSession(sessionId: string) {\n await sqlite.execute({ sql: `DELETE FROM sessions WHERE id = ?`, args: [sessionId] });\n}\n\n// ─── API Tokens ───────────────────────────────────────────────────────────────\nexport async function createApiToken(userId: number): Promise {\n const token = randomBytes(40).toString(\"hex\");\n await sqlite.execute({\n sql: `INSERT INTO api_tokens (token, user_id) VALUES (?, ?)`,\n args: [token, userId],\n });\n return token;\n}\n\nexport async function getUserByToken(token: string) {\n const result = await sqlite.execute({\n sql: `SELECT u.id, u.username, u.avatar_color FROM api_tokens t\n JOIN users u ON u.id = t.user_id WHERE t.token = ?`,\n args: [token],\n });\n if (!result.rows.length) return null;\n return result.rows[0] as { id: number; username: string; avatar_color: string };\n}\n\n// ─── Messages ─────────────────────────────────────────────────────────────────\nexport async function saveMessage(\n userId: number, username: string, avatarColor: string, content: string,\n): Promise {\n const result = await sqlite.execute({\n sql: `INSERT INTO messages (user_id, username, avatar_color, content) VALUES (?, ?, ?, ?)`,\n args: [userId, username, avatarColor, content],\n });\n return Number(result.lastInsertRowid);\n}\n\n/** Last N messages, only from the past 24 hours, oldest first */\nexport async function getRecentMessages(limit = 20) {\n const result = await sqlite.execute({\n sql: `SELECT id, username, avatar_color, content, created_at\n FROM messages\n WHERE created_at > datetime('now', '-24 hours')\n ORDER BY id DESC LIMIT ?`,\n args: [limit],\n });\n return (result.rows as {\n id: number; username: string; avatar_color: string; content: string; created_at: string;\n }[]).reverse();\n}\n\n/** New messages since lastId, only within 24 hours */\nexport async function getMessagesSince(lastId: number) {\n const result = await sqlite.execute({\n sql: `SELECT id, username, avatar_color, content, created_at\n FROM messages\n WHERE id > ? AND created_at > datetime('now', '-24 hours')\n ORDER BY id ASC`,\n args: [lastId],\n });\n return result.rows as {\n id: number; username: string; avatar_color: string; content: string; created_at: string;\n }[];\n}\n\n/** Delete messages older than 24 hours — call from a cleanup cron */\nexport async function deleteExpiredMessages() {\n const result = await sqlite.execute(\n `DELETE FROM messages WHERE created_at <= datetime('now', '-24 hours')`\n );\n return result.rowsAffected;\n}\n",[],[77,136],"606766a8-2ef8-11f1-a3f4-42dde27851f2","migrations.ts","f8f999f0-2ef7-11f1-a3d8-42dde27851f2",9,["D",1775177972912],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runMigrations() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n avatar_color TEXT NOT NULL DEFAULT '#6366f1',\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessions (\n id TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n expires_at TEXT NOT NULL,\n FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE\n )\n `);\n\n // Long-lived tokens for bookmarklets / external API clients\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS api_tokens (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS messages (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL DEFAULT 0,\n username TEXT NOT NULL,\n avatar_color TEXT NOT NULL DEFAULT '#94a3b8',\n content TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )\n `);\n}\n",[],[77,145],["D",1775178334898],[155],[83],{"_37":156,"_13":157,"_40":158,"_42":84,"_43":44,"_45":159,"_47":48,"_49":160,"_17":72,"_52":24,"_54":161,"_56":57,"_58":-5,"_94":162,"_18":163},"4ef2d0a8-2efb-11f1-9398-42dde27851f2","source.js","382c7858-2ef9-11f1-977e-42dde27851f2",19,["D",1775179232123],"// =============================================================\n// LiveChat — All-in-One Bookmarklet (readable source)\n// Uses Shadow DOM for full style isolation from the host page.\n// Custom resize grip so overflow:hidden doesn't break it.\n// Double-send prevention via sending flag.\n// Messages: others LEFT, yours RIGHT (standard chat layout).\n// Token persisted in localStorage — no re-login needed.\n// =============================================================\n(function () {\n var BASE = 'https://MJK--2cb58f1a2ef811f1946342dde27851f2.web.val.run';\n var HOST_ID = '__lc_host';\n\n // ── Toggle ───────────────────────────────────────────────\n if (document.getElementById(HOST_ID)) {\n document.getElementById(HOST_ID).remove();\n return;\n }\n\n // ── Persistent state ─────────────────────────────────────\n var token = localStorage.getItem('__lc_tok') || null;\n var me = localStorage.getItem('__lc_me') || null;\n var lastId = 0, pollTimer = null, authTab = 'login', sending = false;\n\n // Saved geometry\n var W = Math.max(280, parseInt(localStorage.getItem('__lc_w') || '320'));\n var H = Math.max(300, parseInt(localStorage.getItem('__lc_h') || '460'));\n var PX = parseInt(localStorage.getItem('__lc_x') || String(window.innerWidth - W - 24));\n var PY = parseInt(localStorage.getItem('__lc_y') || String(window.innerHeight - H - 24));\n\n // ── Host element (shadow root attached here) ─────────────\n var host = document.createElement('div');\n host.id = HOST_ID;\n // Host sits outside the page flow; all real layout is inside shadow DOM\n host.style.cssText = 'all:initial;position:fixed;left:0;top:0;width:0;height:0;z-index:2147483647;';\n document.body.appendChild(host);\n\n var shadow = host.attachShadow({ mode: 'open' });\n\n // ── Shadow DOM styles ─────────────────────────────────────\n var styleEl = document.createElement('style');\n styleEl.textContent = `\n :host { all: initial; }\n\n #panel {\n position: fixed;\n left: ${PX}px; top: ${PY}px;\n width: ${W}px; height: ${H}px;\n min-width: 260px; min-height: 300px;\n background: #1a1a24;\n border: 1px solid #2e2e3e;\n border-radius: 14px;\n box-shadow: 0 12px 40px rgba(0,0,0,.75);\n font-family: system-ui, sans-serif;\n font-size: 14px;\n color: #f1f1f5;\n display: flex;\n flex-direction: column;\n overflow: hidden;\n /* NO resize:both — we use a custom grip so overflow:hidden doesn't eat it */\n }\n\n /* ── Header / drag bar ── */\n #hdr {\n background: #23232f;\n padding: 10px 14px;\n display: flex;\n justify-content: space-between;\n align-items: center;\n border-bottom: 1px solid #2e2e3e;\n flex-shrink: 0;\n cursor: grab;\n user-select: none;\n }\n #hdr.grabbing { cursor: grabbing; }\n #hdr-title { color: #f1f1f5; font-weight: 700; font-size: 14px; pointer-events: none; }\n #close-btn {\n background: none; border: none; color: #888;\n font-size: 22px; cursor: pointer; line-height: 1; padding: 0; flex-shrink: 0;\n }\n #close-btn:hover { color: #f1f1f5; }\n\n /* ── Body ── */\n #body { display: flex; flex-direction: column; flex: 1; overflow: hidden; }\n\n /* ── Auth ── */\n #auth-wrap {\n display: flex; flex-direction: column; gap: 10px;\n padding: 24px 18px; flex: 1; justify-content: center;\n }\n .auth-title { color: #f1f1f5; font-size: 15px; font-weight: 700; text-align: center; margin-bottom: 4px; }\n .tab-row { display: flex; background: #0f0f13; border-radius: 8px; padding: 3px; gap: 3px; }\n .tab {\n flex: 1; padding: 6px; border: none; border-radius: 6px;\n background: transparent; color: #888; cursor: pointer; font-size: 13px; font-weight: 600;\n }\n .tab.active { background: #6366f1; color: #fff; }\n .lc-input {\n padding: 9px 12px; border-radius: 8px; border: 1px solid #2e2e3e;\n background: #0f0f13; color: #f1f1f5; font-size: 14px; outline: none; width: 100%;\n box-sizing: border-box;\n }\n .lc-input:focus { border-color: #6366f1; }\n .err { color: #ef4444; font-size: 12px; text-align: center; min-height: 14px; }\n .primary-btn {\n padding: 9px; border-radius: 8px; border: none;\n background: #6366f1; color: #fff; font-size: 14px;\n font-weight: 700; cursor: pointer; width: 100%;\n }\n .primary-btn:hover { background: #4f46e5; }\n .primary-btn:disabled { opacity: 0.6; cursor: default; }\n\n /* ── Chat logbar ── */\n #logbar {\n display: flex; justify-content: space-between; align-items: center;\n padding: 5px 14px; background: #23232f; font-size: 11px; color: #888;\n flex-shrink: 0; border-bottom: 1px solid #2e2e3e;\n }\n #logbar span { color: #a5b4fc; font-weight: 700; margin-left: 4px; }\n #logout-btn {\n background: none; border: none; color: #555; cursor: pointer; font-size: 11px;\n }\n #logout-btn:hover { color: #ef4444; }\n\n /* ── Messages ── */\n #msgs {\n flex: 1; overflow-y: auto; padding: 10px 12px;\n display: flex; flex-direction: column; gap: 6px;\n }\n #msgs::-webkit-scrollbar { width: 4px; }\n #msgs::-webkit-scrollbar-thumb { background: #2e2e3e; border-radius: 2px; }\n\n .msg-row {\n display: flex;\n flex-direction: column;\n max-width: 80%;\n }\n .msg-row.mine { align-self: flex-end; align-items: flex-end; }\n .msg-row.theirs { align-self: flex-start; align-items: flex-start; }\n\n .msg-name {\n font-size: 10px; font-weight: 700; margin-bottom: 2px;\n color: #a5b4fc;\n }\n .msg-row.mine .msg-name { color: #c7d2fe; }\n\n .msg-bubble {\n font-size: 12px; padding: 7px 10px; border-radius: 12px;\n line-height: 1.5; word-break: break-word; max-width: 100%;\n }\n .msg-row.theirs .msg-bubble {\n background: #23232f; border-radius: 2px 12px 12px 12px;\n }\n .msg-row.mine .msg-bubble {\n background: #4f46e5; border-radius: 12px 2px 12px 12px;\n }\n\n .empty-msg { color: #555; font-size: 12px; text-align: center; margin: auto; }\n\n /* ── Footer input ── */\n #footer {\n padding: 8px; border-top: 1px solid #2e2e3e;\n display: flex; gap: 6px; flex-shrink: 0;\n }\n #msg-inp {\n flex: 1; background: #0f0f13; border: 1px solid #2e2e3e;\n border-radius: 8px; padding: 7px 10px; color: #f1f1f5;\n font-size: 13px; outline: none; box-sizing: border-box;\n }\n #msg-inp:focus { border-color: #6366f1; }\n #send-btn {\n background: #6366f1; border: none; border-radius: 8px;\n padding: 7px 14px; color: #fff; cursor: pointer;\n font-weight: 700; font-size: 13px; flex-shrink: 0;\n }\n #send-btn:hover { background: #4f46e5; }\n\n /* ── Custom resize grip (bottom-right corner) ── */\n #grip {\n position: absolute;\n bottom: 0; right: 0;\n width: 18px; height: 18px;\n cursor: nwse-resize;\n z-index: 10;\n /* visual triangle indicator */\n background: linear-gradient(135deg, transparent 50%, #444 50%);\n border-radius: 0 0 14px 0;\n opacity: 0.5;\n }\n #grip:hover { opacity: 1; }\n `;\n shadow.appendChild(styleEl);\n\n // ── Panel ─────────────────────────────────────────────────\n var panel = document.createElement('div');\n panel.id = 'panel';\n shadow.appendChild(panel);\n\n // ── Header ────────────────────────────────────────────────\n var hdr = document.createElement('div');\n hdr.id = 'hdr';\n hdr.innerHTML = '💬 LiveChat';\n var closeBtn = document.createElement('button');\n closeBtn.id = 'close-btn';\n closeBtn.textContent = '×';\n closeBtn.onclick = function () { clearInterval(pollTimer); host.remove(); };\n hdr.appendChild(closeBtn);\n panel.appendChild(hdr);\n\n // ── Body ──────────────────────────────────────────────────\n var body = document.createElement('div');\n body.id = 'body';\n panel.appendChild(body);\n\n // ── Resize grip ───────────────────────────────────────────\n var grip = document.createElement('div');\n grip.id = 'grip';\n panel.appendChild(grip);\n\n // ── Drag (header) ─────────────────────────────────────────\n var dragging = false, dSX, dSY, pSX, pSY;\n hdr.addEventListener('mousedown', function (e) {\n if (e.target === closeBtn) return;\n dragging = true;\n dSX = e.clientX; dSY = e.clientY;\n pSX = parseInt(panel.style.left); pSY = parseInt(panel.style.top);\n hdr.classList.add('grabbing');\n e.preventDefault();\n });\n document.addEventListener('mousemove', function (e) {\n if (!dragging) return;\n var nx = Math.max(0, Math.min(pSX + e.clientX - dSX, window.innerWidth - panel.offsetWidth));\n var ny = Math.max(0, Math.min(pSY + e.clientY - dSY, window.innerHeight - panel.offsetHeight));\n panel.style.left = nx + 'px';\n panel.style.top = ny + 'px';\n });\n document.addEventListener('mouseup', function () {\n if (!dragging) return;\n dragging = false;\n hdr.classList.remove('grabbing');\n localStorage.setItem('__lc_x', parseInt(panel.style.left));\n localStorage.setItem('__lc_y', parseInt(panel.style.top));\n });\n\n // ── Custom resize grip ────────────────────────────────────\n var resizing = false, rSX, rSY, rSW, rSH;\n grip.addEventListener('mousedown', function (e) {\n resizing = true;\n rSX = e.clientX; rSY = e.clientY;\n rSW = panel.offsetWidth; rSH = panel.offsetHeight;\n e.preventDefault();\n e.stopPropagation();\n });\n document.addEventListener('mousemove', function (e) {\n if (!resizing) return;\n var nw = Math.max(260, rSW + e.clientX - rSX);\n var nh = Math.max(300, rSH + e.clientY - rSY);\n panel.style.width = nw + 'px';\n panel.style.height = nh + 'px';\n });\n document.addEventListener('mouseup', function () {\n if (!resizing) return;\n resizing = false;\n localStorage.setItem('__lc_w', panel.offsetWidth);\n localStorage.setItem('__lc_h', panel.offsetHeight);\n });\n\n // ═══════════════════════════════════════════════════════════\n // AUTH SCREEN\n // ═══════════════════════════════════════════════════════════\n function showAuth() {\n clearInterval(pollTimer);\n body.innerHTML = '';\n\n var wrap = document.createElement('div');\n wrap.id = 'auth-wrap';\n\n var title = document.createElement('div');\n title.className = 'auth-title';\n title.textContent = '💬 LiveChat';\n wrap.appendChild(title);\n\n var tabRow = document.createElement('div');\n tabRow.className = 'tab-row';\n var tLogin = document.createElement('button');\n tLogin.className = 'tab active'; tLogin.textContent = 'Login';\n var tReg = document.createElement('button');\n tReg.className = 'tab'; tReg.textContent = 'Register';\n tabRow.appendChild(tLogin); tabRow.appendChild(tReg);\n wrap.appendChild(tabRow);\n\n var inpU = document.createElement('input');\n inpU.className = 'lc-input'; inpU.placeholder = 'Username'; inpU.type = 'text';\n var inpP = document.createElement('input');\n inpP.className = 'lc-input'; inpP.placeholder = 'Password'; inpP.type = 'password';\n var errEl = document.createElement('div');\n errEl.className = 'err';\n var subBtn = document.createElement('button');\n subBtn.className = 'primary-btn'; subBtn.textContent = 'Login';\n\n [inpU, inpP, errEl, subBtn].forEach(function (n) { wrap.appendChild(n); });\n body.appendChild(wrap);\n setTimeout(function () { inpU.focus(); }, 60);\n\n tLogin.onclick = function () {\n authTab = 'login';\n tLogin.classList.add('active'); tReg.classList.remove('active');\n subBtn.textContent = 'Login'; errEl.textContent = '';\n };\n tReg.onclick = function () {\n authTab = 'register';\n tReg.classList.add('active'); tLogin.classList.remove('active');\n subBtn.textContent = 'Create Account'; errEl.textContent = '';\n };\n inpP.addEventListener('keydown', function (e) { if (e.key === 'Enter') doAuth(); });\n subBtn.onclick = doAuth;\n\n async function doAuth() {\n var u = inpU.value.trim(), p = inpP.value;\n errEl.textContent = '';\n if (!u || !p) { errEl.textContent = 'Fill in both fields'; return; }\n subBtn.textContent = '…'; subBtn.disabled = true;\n try {\n var r = await fetch(BASE + '/api/' + authTab, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ username: u, password: p }),\n });\n var d = await r.json();\n if (!r.ok) {\n errEl.textContent = d.error || 'Error';\n subBtn.textContent = authTab === 'login' ? 'Login' : 'Create Account';\n subBtn.disabled = false;\n return;\n }\n token = d.token; me = d.user.username;\n localStorage.setItem('__lc_tok', token);\n localStorage.setItem('__lc_me', me);\n showChat();\n } catch (e) {\n errEl.textContent = 'Network error';\n subBtn.textContent = authTab === 'login' ? 'Login' : 'Create Account';\n subBtn.disabled = false;\n }\n }\n }\n\n // ═══════════════════════════════════════════════════════════\n // CHAT SCREEN\n // ═══════════════════════════════════════════════════════════\n function showChat() {\n body.innerHTML = '';\n\n // Logbar\n var logbar = document.createElement('div'); logbar.id = 'logbar';\n logbar.innerHTML = 'Chatting as ' + me + '';\n var loBtn = document.createElement('button'); loBtn.id = 'logout-btn'; loBtn.textContent = 'logout';\n loBtn.onclick = doLogout;\n logbar.appendChild(loBtn);\n body.appendChild(logbar);\n\n // Messages\n var msgs = document.createElement('div'); msgs.id = 'msgs';\n var loadingEl = document.createElement('div');\n loadingEl.className = 'empty-msg'; loadingEl.textContent = 'Loading…';\n msgs.appendChild(loadingEl);\n body.appendChild(msgs);\n\n // Footer\n var footer = document.createElement('div'); footer.id = 'footer';\n var inp = document.createElement('input');\n inp.id = 'msg-inp'; inp.placeholder = 'Type a message…'; inp.maxLength = 500; inp.type = 'text';\n var sendBtn = document.createElement('button'); sendBtn.id = 'send-btn'; sendBtn.textContent = 'Send';\n footer.appendChild(inp); footer.appendChild(sendBtn);\n body.appendChild(footer);\n setTimeout(function () { inp.focus(); }, 60);\n\n // ── Render a message bubble ──────────────────────────────\n function addMsg(m) {\n var empty = msgs.querySelector('.empty-msg');\n if (empty) empty.remove();\n var isOwn = m.username === me;\n\n var row = document.createElement('div');\n row.className = 'msg-row ' + (isOwn ? 'mine' : 'theirs');\n\n var name = document.createElement('div');\n name.className = 'msg-name';\n name.textContent = isOwn ? 'You' : m.username;\n\n var bubble = document.createElement('div');\n bubble.className = 'msg-bubble';\n bubble.textContent = m.content; // textContent — safe, no XSS\n\n row.appendChild(name);\n row.appendChild(bubble);\n msgs.appendChild(row);\n msgs.scrollTop = msgs.scrollHeight;\n }\n\n // ── Load initial messages ────────────────────────────────\n async function load() {\n try {\n var r = await fetch(BASE + '/api/messages?limit=20');\n var d = await r.json();\n msgs.innerHTML = '';\n if (!d.messages || !d.messages.length) {\n var e = document.createElement('div');\n e.className = 'empty-msg'; e.textContent = 'No messages yet. Say hello! 👋';\n msgs.appendChild(e);\n } else {\n d.messages.forEach(addMsg);\n lastId = d.messages[d.messages.length - 1].id;\n }\n } catch (e) {}\n }\n\n // ── Poll for new messages ────────────────────────────────\n async function poll() {\n try {\n var r = await fetch(BASE + '/api/messages/poll?since=' + lastId, {\n headers: { 'Authorization': 'Bearer ' + token }\n });\n if (!r.ok) return;\n var d = await r.json();\n if (d.messages && d.messages.length) {\n d.messages.forEach(function (m) { addMsg(m); lastId = m.id; });\n }\n } catch (e) {}\n }\n\n // ── Send (with double-send guard) ────────────────────────\n async function send() {\n if (sending) return; // ← prevents double-send\n var c = inp.value.trim();\n if (!c) return;\n sending = true;\n inp.value = '';\n try {\n var r = await fetch(BASE + '/api/messages', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token },\n body: JSON.stringify({ content: c }),\n });\n if (r.ok) {\n await poll();\n } else {\n inp.value = c; // restore on failure\n }\n } catch (e) {\n inp.value = c;\n } finally {\n sending = false;\n }\n }\n\n // ── Wire up events ───────────────────────────────────────\n sendBtn.addEventListener('click', send);\n inp.addEventListener('keydown', function (e) {\n if (e.key === 'Enter') {\n e.preventDefault(); // prevent form submit / button click propagation\n send();\n }\n });\n\n load();\n pollTimer = setInterval(poll, 2000);\n }\n\n // ── Logout ────────────────────────────────────────────────\n function doLogout() {\n clearInterval(pollTimer);\n token = null; me = null; lastId = 0; sending = false;\n localStorage.removeItem('__lc_tok');\n localStorage.removeItem('__lc_me');\n fetch(BASE + '/api/logout', { method: 'POST' }).catch(function () {});\n showAuth();\n }\n\n // ── Boot ──────────────────────────────────────────────────\n if (token && me) {\n fetch(BASE + '/api/me', { headers: { 'Authorization': 'Bearer ' + token } })\n .then(function (r) { r.ok ? showChat() : showAuth(); })\n .catch(function () { showAuth(); });\n } else {\n showAuth();\n }\n})();\n",[],[83,157],"f42a4ed8-2ef7-11f1-ab55-42dde27851f2",["D",1775177791326],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Live groupchat with user auth and secure data storage","imageUrl","userId","019d50d6-6e5e-72f9-bffe-0f2f8a74be8e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019d50d6-6e5e-72f9-bffe-12eb0819d881","tursoName","f42a4ed82ef711f1ab5542dde27851f2","tursoHostname","f42a4ed82ef711f1ab5542dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789516253896],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_220":216},"org",{"_11":12,"_214":-5,"_215":216,"_174":175,"_217":218,"_219":57},"branch",{"_17":159,"_13":16,"_37":44,"_206":164,"_207":-5,"_208":-5,"_209":-5,"_210":-5,"_211":-5,"_212":14,"_213":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzNCcEVmOEdvazVHU1JjUXNpbkJpOUpRVFE1YSJ9","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_37":164,"_13":14,"_49":291,"_166":-5,"_167":57,"_168":169,"_170":169,"_171":172,"_173":-5,"_174":175,"_176":-5,"_177":57,"_178":-5,"_179":-5,"_180":65,"_181":182,"_183":184,"_185":186,"_187":292,"_189":-5,"_190":191,"_192":191,"_193":194,"_195":194,"_196":194,"_197":191,"_198":191,"_199":293,"_201":294,"_203":295,"_205":57},[258,260,263,267,268],"files",[258,259,260,261,262,263,264,265,266,267,268],"counts",{"_249":65,"_250":79,"_251":65,"_31":252,"_253":254},[239,240,241,242,243],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_37":82,"_13":83,"_40":84,"_42":-5,"_43":44,"_45":85,"_47":48,"_49":86,"_17":65,"_52":74,"_54":-5,"_56":57,"_58":-5,"_18":248},{"_37":76,"_13":77,"_40":78,"_42":-5,"_43":44,"_45":79,"_47":48,"_49":80,"_17":65,"_52":74,"_54":-5,"_56":57,"_58":-5,"_18":247},{"_37":69,"_13":70,"_40":71,"_42":-5,"_43":44,"_45":72,"_47":48,"_49":73,"_17":65,"_52":74,"_54":-5,"_56":57,"_58":-5,"_18":246},{"_37":60,"_13":61,"_40":62,"_42":-5,"_43":44,"_45":63,"_47":48,"_49":64,"_17":65,"_52":66,"_54":67,"_56":57,"_58":-5,"_18":245},{"_37":38,"_13":39,"_40":41,"_42":-5,"_43":44,"_45":46,"_47":48,"_49":50,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_18":244},[39],[61],[70],[77],[83],"pulls","branches","forks",{"_255":65,"_257":65},"connections",{"_255":65,"_256":65},"count","unfilledCount","emptyCount",{"_37":82,"_13":83,"_40":84,"_42":-5,"_43":44,"_45":85,"_47":48,"_49":152,"_17":65,"_52":74,"_54":-5,"_56":57,"_58":-5,"_94":289,"_18":290},{"_37":156,"_13":157,"_40":158,"_42":84,"_43":44,"_45":159,"_47":48,"_49":160,"_17":72,"_52":24,"_54":161,"_56":57,"_58":-5,"_94":287,"_18":288},{"_37":76,"_13":77,"_40":78,"_42":-5,"_43":44,"_45":79,"_47":48,"_49":130,"_17":65,"_52":74,"_54":-5,"_56":57,"_58":-5,"_94":285,"_18":286},{"_37":144,"_13":145,"_40":146,"_42":78,"_43":44,"_45":147,"_47":48,"_49":148,"_17":79,"_52":140,"_54":149,"_56":57,"_58":-5,"_94":283,"_18":284},{"_37":135,"_13":136,"_40":137,"_42":78,"_43":44,"_45":138,"_47":48,"_49":139,"_17":51,"_52":140,"_54":141,"_56":57,"_58":-5,"_94":281,"_18":282},{"_37":69,"_13":70,"_40":71,"_42":-5,"_43":44,"_45":72,"_47":48,"_49":100,"_17":65,"_52":74,"_54":-5,"_56":57,"_58":-5,"_94":279,"_18":280},{"_37":122,"_13":123,"_40":124,"_42":71,"_43":44,"_45":125,"_47":48,"_49":126,"_17":79,"_52":24,"_54":127,"_56":57,"_58":-5,"_94":277,"_18":278},{"_37":114,"_13":115,"_40":116,"_42":71,"_43":44,"_45":117,"_47":48,"_49":118,"_17":79,"_52":24,"_54":119,"_56":57,"_58":-5,"_94":275,"_18":276},{"_37":106,"_13":107,"_40":108,"_42":71,"_43":44,"_45":109,"_47":48,"_49":110,"_17":79,"_52":24,"_54":111,"_56":57,"_58":-5,"_94":273,"_18":274},{"_37":60,"_13":61,"_40":62,"_42":-5,"_43":44,"_45":63,"_47":48,"_49":97,"_17":65,"_52":66,"_54":67,"_56":57,"_58":-5,"_94":271,"_18":272},{"_37":38,"_13":39,"_40":41,"_42":-5,"_43":44,"_45":46,"_47":48,"_49":93,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_94":269,"_18":270},[],[39],[],[61],[],[70,107],[],[70,115],[],[70,123],[264,265,266],[70],[],[77,136],[],[77,145],[261,262],[77],[],[83,157],[259],[83],["D",1775177791326],["D",1789516253896],{"_11":12,"_220":216},{"_11":12,"_214":-5,"_215":216,"_174":175,"_217":218,"_219":57},{"_17":159,"_13":16,"_37":44,"_206":164,"_207":-5,"_208":-5,"_209":-5,"_210":-5,"_211":-5,"_212":14,"_213":12},"ctx",{"_199":-5,"_236":329,"_330":331,"_332":333,"_334":57,"_335":57,"_336":57,"_337":48,"_338":-5,"_339":-7,"_340":-7,"_341":65,"_342":57,"_343":57,"_344":-5,"_345":57,"_346":57,"_347":57,"_348":-5},"ENV",{"_300":301,"_302":303,"_304":16,"_305":306,"_307":308,"_309":310,"_311":312,"_313":314,"_315":316,"_317":318,"_319":320,"_321":322,"_323":324,"_325":326,"_327":328},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

🔑 Your API Token

Code